Abstract: The authentication process of most protocols for wireless Mesh networks is too complex and their performance is low. To address the issue, this paper proposes a new bilateral authentication and key agreement protocol. The protocol is based on the public key authentication mechanism which has lightweight Certificate Authority and Elliptic Curve Cryptography to reduce the computational complexity. Its validity is formally proved through BAN logic. Its security and performance are analyzed. The results show that the protocol has high security and performance.

Key words: wireless Mesh networks, lightweight Certificate Authority, bilateral authentication, key agreement, elliptic curve cryptography

摘要： 针对无线Mesh网节点间认证过程复杂，效率低的问题，提出一种新的无线Mesh网双向认证和密钥协商协议。该协议使用椭圆曲线密码算法并结合轻量级CA公钥认证机制，降低了认证过程中的计算和通信开销。采用BAN逻辑对该协议进行形式化有效性验证，并对其安全性和性能进行分析，结果表明该协议具有较高的安全性和较高的通信效率。

关键词: 无线Mesh网, 轻量级CA, 双向认证, 密钥协商, 椭圆曲线密码